Abstract:

Traditional virus detection systems, network firewalls, and intrusion detection systems can only detect most of the known threats, but cannot detect potential problems in the network. To this end, the paper proposed a penetration test method based on attack graph. Firstly, considering the factors such as attack duration and attack type, the existing attack graph method was improved, and a new attack graph technique was proposed. Secondly, based on the actual application, the path, time, cost and method of the attack were based on the actual application. Based on the comprehensive considerations, the optimal attack path selection strategy of attack graph was proposed. Finally, the penetration test model based on attack graph was designed and tested. The test results showed that the penetration test algorithm could better simulate real-world attacks in the real world, and could evaluate the current state of the device, which could be applied in the actual penetration test.

Key words: attack graph, penetration test, attack map optimal attack path